The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Change from unmanaged to managed mode on non-Windows platforms

  • Published on Aug 26, 2026
  • 1 minute(s) read
Prev Next

You have two methods to change Trellix Agent mode on non-Windows systems. You can change the mode using local or remote provisioning using maconfig.

Perform the following:

  1. Download and extract the Trellix Agent package (Example: MAxxxLNX.zip and MAxxxMAC.zip) to a temporary location.

  2. Copy the DXL.zip and contrib.ini files to the /var/McAfee/agent/data/contrib folder.

Remote provisioning

  • To change the mode using remote provisioning, run the following command:

    maconfig  -provision -managed -auto -dir "temp location to copy keys" -epo ePOServerMachine [-user ePO-User-name] [-password epo-admin-password]

Local provisioning (ePO - On-prem)

  • To change the mode using local provisioning, follow these steps:

    1. On the target system, locate the maconfig file in the binaries subfolder of the ma folder.

      Linux

      /opt/McAfee/agent/bin

      Macintosh

      /Library/McAfee/agent/bin

    2. Open a terminal window on the target system.

    3. Export Sitelist.xml, srpubkey.bin, reqseckey.bin, req2048seckey.bin, sr2048pubkey.bin, and agentfipsmode from ePO - On-prem to a temporary location on the target system.

    4. Run the following command:

      maconfig -provision -managed -dir "directory location where the sitelist.xml and security keys were exported"
: